Questions tagged [tools]
Tools used by security professionals
201
questions
8
votes
2
answers
13k
views
How can I view the NTFS $MFT using correct field names?
I am trying to view an NTFS master file table. Each tool I have used so far extracts all of the entries, but puts non standard headers such as STANDARD_INFORMATION_ON instead of say $...
- 301
2
votes
2
answers
3k
views
Tools to extract code comments from sites? [closed]
I often come across sites that have way to many comments included in their source code, sometimes these comments offer valuable insight into whats happening in the code, the logic of functions, unused ...
- 11.5k
3
votes
1
answer
709
views
How to determine hashes/second in password cryptanalysis
I'm working on my dissertation concerning cryptanalysis on password hashes. As part of my research, I aim to crack a number of passwords with John the Ripper and rainbowcrack-mt.
I'd like to ...
- 107
5
votes
2
answers
9k
views
SQL Injection - Extracting database data from the page content
I have a question I am hoping someone could help with..
I am in the process of writing an SQL Injection tool from scratch (I am aware there are already excellent tools out there such as SQL Map, but ...
- 545
3
votes
1
answer
909
views
What are good tools for CRLF discovery? [closed]
What are good tools for finding CRLF injection vulnerabilities?
- 1,442
4
votes
2
answers
2k
views
SQL Injection - Automating the fingerprinting of the DBMS
I have a problem I'm hoping someone could help with regarding the fingerprinting of the DBMS using sql injection, in a scripted/automated way to accurately and reliabling determine the DBMS.
I am in ...
- 545
6
votes
1
answer
11k
views
SQL Injection - UNION SELECT and returning a 'keyword' to find exploitable columns
I have a problem I'm hoping someone could help with regarding the use of UNION SELECT, in a scripted/automated way to find columns that are exploitable (having already found the number of columns ...
- 545
47
votes
5
answers
59k
views
What's an easy way to perform a man-in-the-middle attack on SSL?
I'd like to perform a man-in-the-middle attack on SSL connections between clients and a server.
Assuming the following:
I've got a certificate that the client will accept, via poor cert validation ...
- 135k
17
votes
3
answers
2k
views
How to evaluate a password manager?
How can we quantify the trade-off between password aggregation and convenience?
Password managers such as lastpass are convenient, but aggregation of passwords into a common store may reduce security....
- 3,003
3
votes
1
answer
3k
views
Pointers for john the ripper rulesets
I've been pouring over the JtR ruleset documentation and making little progress. I understand how to use it to make various permutations from a given wordlist, that's fine. However, I'm trying to ...
- 133
17
votes
7
answers
21k
views
Affordable web application attack tools
I've been using Burp Intruder (part of Burp suite), but in the free edition of Burp Suite the Intruder functionality is Time-throttled. As a student pen tester however, I can't justify the cost of $...
- 3,857
-1
votes
4
answers
29k
views
Tools for performing HTTP FLOOD attack? [closed]
I'm looking for tools which can perform HTTP FLOOD ATTACK .
I seached a lot and this is the only tool I've found DoSHTTP.
Does anyone know another tool?
I want to test them on my localhost to find ...
- 191
4
votes
1
answer
349
views
Finding all AJAX entrypoints
Is there any tool to (automatically) find all backend JavaScript entrypoints within a site?
I have to check a site for vulnerabilities in the backend code that validates AJAX parameters and I would ...
- 187
0
votes
2
answers
2k
views
Msf and exploitdb on Backtrack 5
Metasploit (msf) doesn't see exploits from exploitdb. I've just updated directory on my Backtrack
cd /pentest/exploits/exploitdb
svn update
How can I load them now into msf? When i use a script ...
- 121
0
votes
1
answer
258
views
Comparison between Data Encryption Tools and Data Sanitization Tools [closed]
What are the famous Data Sanitization Tools for languages such as ASP/PHP/Html Web Sites?
Which Data Sanitization tools have the best results?
Difference between Data encryption and Data ...
- 101
5
votes
1
answer
1k
views
Creating a DDoS attack using DirectConnect
I have been trying to hack around with Apex DirectConnect. What I wish to do is to utilize the querying nature of P2P apps like DC to generate a DDoS attack (see links for reference here, here and ...
- 1,808
-3
votes
2
answers
261
views
GPS tracking device [closed]
Could anyone please tell me if there exists a GPS tracking device that is light, small and safe (e.g., does not cause harmful radiation) and can be tracked back via say an app on a phone?
5
votes
2
answers
4k
views
Tools for analyzing Perl 5 code? [closed]
I'm looking for good tools for analyzing and/or detecting security issues in a large software project written in Perl 5. It could be static or dynamic analysis. I know that Perl is undecidable, but I'...
- 181
8
votes
1
answer
2k
views
Identifying, analyzing, and predicting weak session cookies
To elaborate on this, I'm looking at this from the perspective of a hacker/penetration tester. Many times I have seen web applications that I know have weak cookies. I can tell this because I can ...
- 241
4
votes
1
answer
659
views
Is Window's system restoration useful for getting rid of malware?
If your computer has been infected with some kind of malware, could a restoration of the system, using the tool provided by windows, help you getting rid of that malware?
We should suppose that it ...
- 944
4
votes
2
answers
249
views
What information will dig leak to an attacker?
What information will the axfr and ixfr commands in DIG provide to an attacker?
- 161
5
votes
3
answers
2k
views
Secure source code review tool for jQuery
Does anyone know any secure source code review tool for jQuery/jQueryUI. I've looked around a bit but couldn't find anything. Its too good if it is opensource.
- 2,304
4
votes
3
answers
5k
views
Are there any tools that focus on shellcode analysis?
Shellcode presents certain challenges for disassembly. It often self-modifies, jumps to the stack (where the shellcode will likely be placed), and relies on certain unusual tricks that standard ...
- 135k
6
votes
3
answers
462
views
What CVE identifier will follow after CVE-2012-9999?
I am writing an application which uses CVE identifiers to cross-reference vulnerabilities. I would like to make it compatible with future CVE identifiers.
If it happens that there are more than 9999 ...
- 163
2
votes
1
answer
770
views
Diagnosing possible svchost.exe thread on Windows 7
I used win64dd.exe to get a memory image on a 64-bit computer running Windows 7 and had Mandiant Redline analyze the image. One of the things marked red was one of the svchost.exe processes. Redline ...
user11978
2
votes
1
answer
5k
views
Snort & Logging
I am looking for some support on using Snort in Windows 7. My experience so far is using WireShark, so this is new territory to me.
I would like to use Snort to perform a trace, which, after it ends,...
- 21
4
votes
4
answers
3k
views
Conky for PenTesters
I have been working on a conky configuration to help me manage penetration tests, but after much research, I cannot find anyone else speaking of their configs in any way other than the glitz.
...
- 128k
3
votes
3
answers
3k
views
How to intercept an application that bypasses local proxy
I am behind a corporate proxy and the application that i have to test will work only if it is given an exception for using proxy server(i.e it is added to the exceptions list of the sites that do not ...
- 2,304
5
votes
5
answers
1k
views
Tool to grab sensitive information from command lines [closed]
Of the information entered on the command line (command name and arguments) have to be considered public (everyone can access it using commands like ps).
Is there a known tool to automate this kind ...
- 458
1
vote
1
answer
265
views
Is there a compatibility issue between IPv6 and security testing tools?
Now that IPv6 is slowly coming into the picture, will there be a compatibility issue with using security testing tools, e.g.,:
Network vulnerability scanning tools
Web Applicaiton vulnerability ...
- 2,304
10
votes
1
answer
7k
views
How to Perform Vulnerability Assessment for WCF services
Does anyone know how to perform penetration testing/vulnerability assessment for Microsoft WCF services I couldn't find a tools till now , any tools available and guides are welcome
- 867
1
vote
1
answer
226
views
Reliability of DNSBLs for Stopping Forum Spam
I know that certain DNS blacklists are considered more reliable than others, in that they don't have as many false positives.
I run a forum that is known to be spammed, and I've installed a mod to ...
- 731
2
votes
2
answers
765
views
How can I protect content distributed on a linux virtual machine?
What assets am I trying to protect?
An unofficial pre-alpha software prototype provided as a reproducible example for evaluation during the scientific peer-review process. The software will be ...
- 255
6
votes
4
answers
23k
views
Secure use of psexec or better alternative to it
I want to remotely start VMWare virtual machines (I own VMWare Workstation) and to this end I need to execute on host something like "vmrun -T ws H:\VMWare\VM1\VM1.vmx nogui" with user desktop context,...
- 233
3
votes
1
answer
279
views
Complex Consumer Matching Queries with PGP Universal
For group membership I am using LDAP for performing the consumer matching. I can pretty clearly see how to do simple matches with ORs or ANDs, but I would like to match in a more complicated fashion. ...
- 15.3k
0
votes
2
answers
1k
views
In TrueCrypt Hidden / Normal overriding?
If I have a normal TrueCrypt volume, and I want to create a Hidden volume inside of it, how do I stop the 2 from overriding each other? Or do I just have to manually make sure the inner volume does ...
1
vote
2
answers
7k
views
What is the best tool to anonymize your scans (network/ports)? [closed]
What are the best tools to anonymize my port scanners and vulnerability assessment tools (like nmap , metasploit ) ...?
I have been using Backtrack and tor network with proxychains to do this, but ...
- 867
2
votes
2
answers
989
views
up2date tools for security audit linux / centos
I'm setting up a new CentOS 6 server and am looking into some security audit tools to validate my configuration and to point out weak spots in the server.
There are a lot of non up2date tools out ...
- 221
6
votes
1
answer
24k
views
Is there a sms authentication that works like 10minutemail? [closed]
I remember reading on this site a user recommending 10minutemail.com as a way to register or give email address to non-trusted websites.
Is there any similar site for disposable phone number for ...
- 61
13
votes
5
answers
13k
views
Good file encryption tools [closed]
Could you please help me find a good file encryption tool? The target OS is Linux, but tools for Windows are welcome, too. FOSS tools are preferred. The tool must be reliable both for the recovery of ...
- 239
4
votes
1
answer
286
views
Data analyzer tools [closed]
I have to find information that can be located in files on a hard drive.
Are there good tools to search for specific keywords (even in the hard disk free space area ;-), detect encrypted files, detect ...
- 569
13
votes
4
answers
7k
views
How can I remotely wipe the contents of a Linux Laptop if its been stolen?
I am currently investigating using Linux Laptops for my development team. We currently run Windows. The one advantage that keeps coming up for Windows over Linux from a system administration / ...
- 131
3
votes
3
answers
13k
views
What sites are still vulnerable to FireSheep?
Am doing a Firesheep Demo in a few weeks as a security awareness project. However I can't seem to get it working, and I'm wondering if it's just because the handlers it ships with are now outdated ...
- 9,313
1
vote
4
answers
2k
views
Completely wiping a HDD (i.e. nothing is recoverable) [duplicate]
Possible Duplicate:
How can I reliably erase all information on a hard drive?
I'm looking to see if there's a method that can completely wipe out the content of a HDD, so that nothing previously ...
- 113
8
votes
3
answers
4k
views
Who (which process) is calling curl?
On my mac (Lion), I know that curl is bing used by some unknown process to communicate with a server.
Basically I installed little Snitch and find out that "somebody" is using curl periodically.
...
- 733
0
votes
4
answers
1k
views
How to rewrite config files using SNMP?
I scanned a router and found that the community string is public. The write access is also enabled. Now I want to change the configuration of the router. Can anybody tell me about tools and tutorials ...
- 383
14
votes
3
answers
4k
views
How to recover securely deleted data
Since we all know files are recoverable with programs after being deleted from the recycling bin, everyone is told to do secure wipes by putting random data over the files you're deleting on the disk ...
- 296
2
votes
2
answers
383
views
Scan Novell NetWare backend with Windows servers and clients
Could anyone provide some insight on performing an internal vulnerability assessment regarding Novell NetWare as the backend with client workstations and servers running various versions of Windows?
...
- 153
3
votes
2
answers
1k
views
Are there sensors/devices to be used for reading magnetic bits of hard disk
I would like to ask about the availability of any sensor or device that can be used to read magnetic bits inside hard disks? I tried to google that but I did not see any useful thing till now. I think ...
- 259
22
votes
7
answers
8k
views
Convenient cross-platform help on checking secure hashes like SHA-256
It is often helpful to be able to obtain a good cryptographic checksum of a file, e.g. the SHA-256 hash. This can be used to verify file integrity, so long as you have a reliable source for the hash.
...
- 20.7k